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Specifi cation 

Title of the Invention 

5 Cross-site search method and cross-site search 

program 

Background of the Invention 

1. Field of the invention 

10 The present invention relates to a cross-site search 

method that requests information retrieval according to 
a search condition designated by a user from any information 
retrieval sites on a network to present search results to 
a user, and relates to a cross-site search program that 

15 controls a computer as equipment for realizing such a 
cross-site search method. 

2. Prior art 

As well known, on networks such as the Internet, 
various information retrieval sites (an Electronic Library 

20 system, a database retrieval site, and an web retrieval 
site, etc.) are constructed. Since these information 
retrieval sites are usually constructed individually, a 
user must access each of these sites to acquire search 
results from respective information retrieval sites. 

25 However, recently, so-called cross-site search sites 
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are constructed on the Internet. For example, "Hon no 
shiori/the search engine for new books, old books and 
secondhand books" whose URL is http://www.crypto.ne.jp 
/search . html that could be browsed on February 24, 2003, 
5 and "WPC AENA/ Ultimate weapon for finding a hotel" whose 
URL is http://arena.nikkeibp.co.jp/tec/web/gaz/90/ that 
could be browsed on February 24, 2003. 

Such a cross-site search site enables a user to access 
two or more information retrieval sites by a single 

10 operation with the same search condition. In addition, 
when the cross-site search site accepts a search condition 
from a user, it requests information retrieval from 
respective information retrieval sites, then, it presents 
search results acquired from the respective information 

15 retrieval sites to the use at a time. 

Incidentally, some information retrieval sites in 
■ many sites on the Internet require authentication as a 
condition to respond search results. Since the 

above-described conventional cross-site search sites did 

20 not have a function to support a site that requires 
authentication, such a site could not be set as a target 
site for information retrieval. For this reason, a user 
must register with the information retrieval site that 
requires authentication and must directly access the 

25 information retrieval site that requires authentication 
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to acquire search results aside from access to the 
cross-site search site. 

Summary of the Invention 

5 

The present invention is made in view of the 
above-described problems of the conventional method. An 
object of the present invention is to provide an improved 
cross-site search method that enables to acquire search 

10 results matching the same search condition from all target 
information retrieval sites regardless of whether an 
information retrieval site requires authentication or not. 
Another object of the present invention is to provide an 
improved cross-site search program that controls a computer 

15 as equipment for realizing such a cross-site search method . 

A cross-site search method of the present invention 
adopts the following construction in order to achieve the 
above-mentioned object . 

That is, the cross-site search method of the present 

20 invention is used in a serverthat connects toa user terminal 
and information retrieval sites through a network and that 
requests information retrieval according to a search 
condition designated by the user terminal to receive search 
results from the information retrieval sites, the method 

25 includes: 
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a recording step for recording a script definition 
in which a conversion function and an authentication 
function are defined for each of information retrieval 
sites into storage, the conversion function converting a 
5 description of a search condition in compliance with a 
predetermined description rule into a description in 
compliance with a description rule of an information 
retrieval site, and the authentication function being used 
for an authentication procedure of an information retrieval 

10 site that requires authentication as a condition to respond 
search results; 

a reading step for reading a script definition 
corresponding to the target information retrieval site 
designated by the user terminal from the storage; 

15 a first receiving step for receiving certification 

from the information retrieval site by executing the 
authentication function when the script definition for the 
information retrieval site includes the authentication 
function; 

20 a converting step for converting the search condition 

designated by the user terminal into a search condition 
in compliance with a description rule of the information 
retrieval site by executing the conversion function in the 
script definition; 

25 a first transmitting step for transmitting a search 
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request according to the converted search condition to the 
target information retrieval site; 

a second receiving step for receiving search results 
from the information retrieval site that has retrieved 
5 information in response to the search request; and 

a second transmitting step for transmitting the 
received search results to the user terminal. 

With this construction, when any one information 
retrieval site and a search condition are designated by 
10 any one user terminal, the server requests information 
retrieval from an information retrieval site according to 
the script definition. When the information retrieval 
site requires authentication as a condition to respond 
search results, the server requests the information 
15 retrieval after a predetermined authentication procedure. 
On the other hand, when the information retrieval site does 
not require authentication, the server directly requests 
information retrieval without an authentication 
procedure . 

20 Therefore, an operator of a user terminal is able 

to acquire search results matching the same search 
condition from all target information retrieval sites 
regardless of whether an information retrieval site 
requires authentication or not. 

25 Further, according to the cross-site search method 
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of the present invention, the storage of the server may 
store a table that defines a relationship between 
predetermined sets of authentication information assigned 
to the server by the information retrieval site that 
5 restricts the access number by assigning predetermined sets 
of authentication information to a source of an information 
retrieval request and ID information to identify whether 
the authentication information is used or not for each 
information retrieval site that restricts the access 
10 number. 

With this construction, when an authentication 
function is defined in the script definition corresponding 
to the information retrieval site designated by any one 
user terminal, the server reads the table corresponding 

15 to the information retrieval site from the storage 
according to the authentication function, and identifies 
unassigned authentication information based on the ID 
information in the table read from the storage. Then the 
server can transmit the identified authentication 

20 information to the information retrieval site to acquire 
certification from the information retrieval site. 
Therefore, if an information retrieval site requiring 
authentication restricts the access number by assigning 
a predetermined sets of authentication information to a 

25 source of information retrieval in advance, an operator 
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of a user terminal can acquire search results from such 
an information retrieval site through the server. 

Further, the cross-site search program of the present 
invention adopts the following construction in order to 
5 achieve the above-mentioned object. 

That is, the cross-site search program of the present 
invention operates a computer that connects to a user 
terminal and information retrieval sites through a network, 
the program includes: 

10 a step for accepting a designation of any one 

information retrieval site with a search condition by any 
one user terminal; 

a step for identifying the script definition 
corresponding to the target information retrieval site 

15 designated by the user terminal in a number of script 
definitions each of which defines a conversion function 
to convert a description of a search condition in compliance 
with a predetermined description rule into a description 
in compliance with a description rule of an information 

20 retrieval site; 

a step for receiving certification from the 
information retrieval site by executing an authentication 
function when the identified script definition includes 
the authentication function because the information 

25 retrieval site requires authentication as a condition to 
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respond search results; 

a step for converting the search condition designated 
by the user terminal into a search condition in compliance 
with a description rule of the information retrieval site 
5 by executing the conversion function in the script 
definition; 

a step for transmitting a search request according 
to the converted search condition to the target information 
retrieval site; 
10 a step for receiving search results from the 

information retrieval site that has retrieved information 
in response to the search request; and 

a step for transmitting the received search results 
to the user terminal. 
15 According to the cross-site search program can 

operate a computer as a device executing the 
above-described cross-site search method. 

Description of the Accompanying Drawings 

20 

Fig. 1 is a block diagram showing a general 
construction of a cross-site search system according to 
an embodiment; 

Fig. 2 is a table showing a data structure of an 
25 authentication information table; 
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Fig. 3 is a list of one example of a script definition; 

Fig. 4 is a flow chart showing contents of an web 
server process; 

Fig. 5 is a flow chart showing contents of a cross-site 
5 search CGI process; 

Figs. 6 and 7 are flow charts showing contents of 
a script definition interpretation process; and 

Fig. 8 is a diagram showing the example of a search 
item input screen. 

10 

Description of the Preferred Embodiments 

Hereinafter, an embodiment of the present invention 
will be described with reference to the drawings. 
15 <About system conf igur at ion> 

Fig. 1 is a block diagram showing a general 
construction of a cross-site search system according to 
the embodiment. As shown in Fig. 1, the cross-site search 
system is provided with a user terminal 10, a cross-site 
20 search server 20 and a number of information retrieval sites 
30. The terminal 10, the server 20 and the sites 30 are 
mutually connected through the Internet so as to enable 
socket communication . 

A user gives a search request from his or her own 
25 user terminal 10 to the cross-site search server 20, and 
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the cross-site search server 20 searches the information 
retrieval sites based on the requested search condition. 
Next, the terminal 10, the server 20 and the site 30 will 
be described, respectively. 
5 The user terminal 10 is a computer used as an Internet 

client machine. The user terminal 10 consists of a CPU 
(Cent ral Processing Unit ) 11, a communication adapter (not 
shown), a display 12, an input device 13, a RAM (Random 
Access Memory) 14 and an HDD (Hard Disk Drive) 15. These 
10 parts of the hardware are mutually connected by a bus B. 

The CPU 11 is a central processing unit that controls 
the entire system of the user terminal 10. 

Moreover, the communication adapter (not shown) is 
a communication device functioning as an interface with 
15 a line connected to the Internet. Specifically, it is a 
modem, a TA (Terminal Adapter) , a router, a LAN (Local Area 
Network) connection board, or the like. 

The display 12 is a device for displaying an image 
generated by CPU 11. Specifically, it is a cathode-ray 
20 tube display or a liquid crystal display. 

The input device 13 is a device for receiving input 
from an operator. Specifically it is a keyboard, a mouse 
and a touch screen. 

The RAM 14 is a main memory on which a work area is 
25 developed when the CPU 11 executes various programs. 
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The HDD 15 is storage for storing various programs 
that are loaded by the CPU 11 onto the RAM 14 and that are 
executed. The HDD 15 stores a basic program including a 
function of communication with the cross-site search server 
5 20 through the communication adapter according to TCP/IP 
(Transmission Control Protocol /Internet Protocol), a WWW 
(World Wide Web) browser (referred to as a "web browser") 
16 that transmits various HTTP (Hyper Text Transfer 
Protocol) requests to the cross-site search server 20 using 

10 the communication function of the basic program and 
displays web contents (web page based on HTML (Hyper Text 
Mark-up Language) data or the like) by interpreting the 
HTTP response transmitted f romthe cross-site search server 
20 in response to the requests. 

15 Since the web browser 16 is a generally delivered 

program such as the Internet Explorer (trademark of U.S. 
Microsoft Corp.) of U.S. Microsoft Corp. or the Netscape 
Navigator (trademark of U.S. Netscape Communications) of 
U.S. Netscape Communications, a detailed description is 

20 omitted. 

In addition, although only one user terminal 10 is 
illustrated in Fig. 1, two or more user terminals 10 exist 
in fact. That is, the user terminal 1 0 means every computer 
that can connect with the Internet and has a web browsing 
25 function. 
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The cross-site search server 20 is a computer used 
as an Internet server. The cross-site search server 20 
consists of a CPU 21, a communication adapter (not shown) , 
a RAM 22 and an HDD 23. These parts of the hardware are 
5 mutually connected by a bus B. 

The CPU 21 is a central processing unit that controls 
the entire system of the cross-site search server 20. 
Further, the communication adapter (not shown) is a 
communication device functioning as an interface with a 
10 line (it may be a backbone line in some cases) connected 
to the Internet. 

The RAM 22 is a main memory on which a work area is 
developed when the CPU 21 executes various processes. 

The HDD 23 is storage for storing various programs 
15 that are read by the CPU 21 onto the RAM 22 to be executed 
and various data. The HDD 23 stores the screen data 24 
(HTML data etc. ) to display various screens (a search item 
input screen shown in Fig. 8, for example ) on the web browser 
16, the same number of script definitions 25 (it will be 
20 described below with reference to Fig . 3) as the information 
retrieval sites 30 and the same number of authentication 
information table 26 as the information retrieval sites 
30 that require authentication. 

Fig. 2 is a table for describing the data structure 
25 of the authentication information table 26. As shown in 
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Fig. 2, the authentication information table 26 is 
constituted by creating a record that includes fields of 
"login ID", "password" and "ID information" for each 
authentication information (a combination of the "login 
5 ID" and "password") . The login ID and the password assigned 
to the cross-site search server 20 by the information 
retrieval site 30 that requires authentication as a 
condition to respond search results are recorded in the 
fields of "login ID" and "password", respectively. 

10 In addition, the authentication information table 

26 of Fig. 2 shows that three sets of authentication 
information (combinations of login ID and password) are 
assigned to the cross-site search server 20. 

Process ID assigned to the below-mentioned cross-site 

15 search CGI (Common Gateway Interface) program 28 at the 
time of execution is recorded in the "ID information" field . 
Aprocess means the management unit of the program execution 
when the CPU 21 assigns a working area in the RAM 22 to 
one CGI program to execute. And the process ID means 

20 information for uniquely identifying many running 
processes, respectively. That is, when the cross-site 
search CGI program 28 to which process ID is assigned is 
executed and uses login ID and a password, the process ID 
in question is recorded in the "ID information" field of 

25 the record whose contents in the "login ID" field and the 
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"password" field match the used login ID and password, 
respectively. However, when the combination of login ID 
and a password has never been used in any process, the "ID 
information" field of the record remains as a blank field. 
5 Moreover, the HDD 23 stores a WWW server (referred 

to as an web server hereinafter) program 27 and the 
cross-site search CGI program 28 in addition to the basic 
program for supporting TCP/IP. The web server program 27 
responds by reading screen data 24 indicated by URL (uniform 

10 Resource Locator) that is designated by an HTTP request 
from the web browser 16 from the HDD 23, and it starts a 
CGI program indicated by the requested URL . The cross-site 
search CGI program 28, which is one of CGI programs, makes 
the CPU 21 execute functions defined in the script 

15 definition 25. The contents of the program 28 will be 
described later with reference to Fig. 5. 

The information retrieval site 30 searches its own 
database for predetermined information in response to the 
request from a computer on the Internet, such as the 

20 cross-site search server 20, and returns the search results 
to the computer. The functions of the information 
retrieval site 30 is realized on a computer connected with 
the Internet. That is, the information retrieval site 30 
means a server computer including storage such as an HDD 

25 that stores the web server program 31, the database 32 to 
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be searched and the search CGI program 33 for searching 
the database 32, andaCPUthatexecutesthe various programs 
31 and 33 in a broad sense. On the contrary, the information 
retrieval site 30 means the search CGI program 33 in a narrow 
5 sense. In addition, Fig. 1 shows the informat ion ret rieval 
sites 30 at two places, but they exist at more places in 
fact. Moreover, some information retrieval sites in many 
sites on the Internet require authentication as a condition 
to respond search results. In the information retrieval 

10 sites 30 that require authentication, storage such as an 
HDD stores an authentication server program 34 and an 
authentication table (not shown) in addition to the search 
CGI program 33. 

When the authentication server program 34, that is, 

15 the CPU of the information retrieval site 30 executing the 
program 34, receives the login ID and the password assigned 
to the cross-site search server 20 from this server 20 
through the function of the web server program 31, it judges 
whether a combination of the login ID and the password can 

20 be authenticated or not. Then, the authentication server 
program 34 permits execution of the search CGI program 33, 
when the combination can be authenticated (when the 
combination exists in the authentication table) . When the 
combination cannot be authenticated, the program 34 bars 

25 execution of the search CGI program 33 and informs such 
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a result to the cross-site search server 20 through the 
function of the web server program 31. 

Further, the information retrieval sites 30 that 
require authentication can be distinguished into two groups . 
5 The information retrieval sites 30 belonging to the first 
group restrict the access number by assigning predetermined 
sets of authentication information to computers on the 
network- The above-mentioned authentication information 
table 26 is prepared for such a site by assigning some sets 
10 of authentication information to the cross-site search 
server 2 0 . 

The information retrieval sites 30 belonging to the 
second group provide one set of authentication information 
that is shared by the respective computers on the network 

15 and give notice of the authentication information in 
response to a request . Since an information retrieval site 
of the second group uses the authentication information 
in order to acquire the information about users, it accepts 
all accesses from the computers of the users' who got the 

20 authentication information and executes a search. For 
this reason, the information retrieval sites 30 of the 
second group do not substantially restrict the number of 
accesses . 

<About script def inition> 
25 Fig. 3 is an example of the script definition 25 used 
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when the cross-site search server 20 searches the 
information retrieval site 30. This script definition is 
an example in case the information retrieval site 30 
requires authentication. That is, Fig. 3 is an example 
5 of the script definition prepared for the cross-site search 
server 20 when the information retrieval site 30 searches 
the database by the search CGI program 33 and authenticates 
by the authentication server program 34. 

As shown in Fig. 3, the script definition 25 consists 

10 of a host definition that defines information required 
before and after the information retrieval request in the 
corresponding information retrieval site 30, and a search 
script body for specifying the contents of the search. 

In addition, since the host definition is not related 

15 to the present invention, it will be described briefly. 
The host definition defines the character code set at the 
information retrieval site 30 corresponding to the script 
definition 25, a method to acquire search results, and the 
display name in a search result screen (not shown) , or the 

20 like. 

On the other hand, the search script body includes 
a variable definition that describes variables used in the 
script definition 25 , a CGI parameter conversion definition 
that describes the functions for acquiring the login ID 
25 and password required for the authentication when the 
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information retrieval site 30 requires authentication, a 
login execution definition that describes the functions 
for transmitting the login ID and password to the 
information retrieval site 30, a CGI parameter conversion 
5 definition that describes the functions for converting the 
search condition input in the below-mentioned search item 
input screen (refer to Fig. 8) in compliance with the 
description rule of the information retrieval site 30, and 
a search execution definition that describes the functions 

10 for transmitting a search execution request message to the 
information retrieval site 30. 

Hereinafter, the functions GETAUTHENT ( ) , GET I D ( ) , 
GETPASSWDO, ADDPARAM ( ) , MAKEPARAM ( ) , and GETHTTP ( ) , 
which can be defined in the respective script definitions 

15 25, will be described with their forms. 

1. GETAUTHENT ( file name of authentication information 
table) 

This function reads the authentication information 
(login ID and password) that is not used by the currently 

20 executed cross-site search CGI program 28 from the 
authentication information table 26 designated by the file 
name. In the script definition 25 shown in Fig. 3, since 
it is defined as AUTH=GETAUTHENT ( "sampleOl") , the 
cross-site search CGI program 28 according to the function 

25 GETAUTHENT ( ) reads the authentication information that is 
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not used by the other cross-site search CGI programs 28 
under execution from the authentication information table 
26 whose file name is " sample 0 1 " . Then the program 28 
substitutes the authentication information to the variable 
5 AUTH and stores it in the variable area 28a. 
2 . GETID (variable) 

This function reads login ID from the information 
substituted to the variable. In the script definition 25 
shown in Fig. 3, since it is defined as I D=GET I D ( AUTH ) , 

10 the cross-site search CGI program 28 according to the 
function GETID () reads the login ID from the authentication 
information substituted to the variable AUTH. Then the 
program 28 substitutes the login ID to the variable ID and 
stores it in the variable area 28a. 

15 3. GETPASSWD (variable) 

This function reads a password from the information 
substituted to the variable. In the script definition 25 
shown in Fig. 3, since it is defined as 
PASSWD=GETPASSWD (AUTH) , the cross-site search CGI program 

20 28 according to the function GETPASSWD ( ) reads the password 
from the authentication information substituted to the 
variable AUTH. Then the program 28 substitutes the 
password to the variable PASSWD and stores it in the variable 
area 28a. 

25 4. ADDPARAM (attribute value of NAME attribute, 
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variable ) 

This function adds the argument information that 
consists of an attribute value of a NAME attribute and 
information substituted to the variable to the end of a 
5 parameter creation area 28b. In the script definition 25 
shown in Fig. 3, since it is defined as ADDPARAM ( "auth" , 
ID) , assuming that "10001" is substituted to the variable 
ID, the cross-site search CGI program 28 according to the 
function ADDPARAM ( ) adds the argument information 

10 "auth=10001" to the end of the parameter creation area 28b. 
Further, since it is defined as ADDPARAM ("password", 
PASSWD) in this script definition 25, assuming that 
"QW1ER2" is substituted to the variable PASSWD, the 
cross-site search CGI program 28 according to the function 

15 ADDPARAM () adds the argument information 

u password=QWlER2" to the end of parameter creation area 
28b. 

Furthermore, since it is defined as ADDPARAM ("title", 
TITLE) and ADDPARAM ("auth", AUTHER) in the script 

20 definition 25, if, for example, "script language" and 
"Fujitsu Taro" are input into the title column 431 and the 
author column 432 of the search item input screen (see Fig. 
8), respectively, and when the search condition acquired 
from the web browser 16 on the variable area 28a shows 

25 "TITLE=script language" and "AUTHER=Fu j itsu Taro", the 
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cross-site search CGI program 28 according to the function 
ADDPARAM ( ) adds the argument information of w t it le = scr ipt 
language" and xx auth = Fu j it su Taro" to the end of the 
parameter creation area 28b. 
5 5. MAKEPARAM ( ) 

This function converts the information stored in the 
parameter creation area 28b into the form that is suitable 
to pass to the information retrieval site 30. With the 
example used in the description of the function ADDPARAM ( ) , 

10 the cross-site search CGI program 28 according to the 
function MAKEPARAM () reads " aut h=l 0 0 0 1 " and 

u password=QWlER2" from the parameter creation area 28b, 
connecting them by xx &" as "auth = 10001&password=QWlER2" . 
Inaddition, since the script definition 25 of Fig . 3defines 

15 PRM=MAKEPARAM ( ) , the cross-site search CGI program 28 
according to the function MAKEPARAM ( ) substitutes the 
information made by combining many pieces of argument 
information into the variable PRM and stores it in the 
parameter creation area 28b. 

20 6. GETHTTP ( first variable, second variable, name of 
transmitting method) 

This function transmits the information substituted 
into the second variable to the destination address 
indicated by the information substituted into the first 

25 variable by the transmitting method indicated by the name 
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of the transmitting method. Since the script definition 
25 shown in Fig. 3 defines GETHTTP (CGI , PRM, "POST"), the 
cross-site search CGI program 28 according to the function 
GETHTTP () gives a direction to the web server program 27 
5 so that one or more pieces of the argument information 
substituted into the variable PRM is transmitted to the 
URL substituted into the variable CGI by the POST method. 
<About the contents of process> 

Next, the process executed in the above-constructed 

10 cross-site search system will be described with reference 
to flow charts shown in Fig. 4 through Fig. 7. 

The contents of web server process will be described 
based on Fig. 4. First, in the cross-site search server 
20, when the CPU 21 reads and executes the web server program 

15 27, the CPU 21 realizes the function as a web server. 
Hereinafter, the reference "27" is given to the web server. 
At the first step S101 in the flow chart shown in Fig. 4, 
the web server 27 stands by until receiving an HTTP request 
from the web browser 16 of any one of the user terminals 

20 10. 

On the other hand, when an operator operates the input 
device 13 of the user terminal 10 to start the web browser 
and to access the cross-site search site on the cross-site 
search server 20, the web browser 16 (the CPU 11 executes 
25 the browser program) of the user terminal 10 transmits an 
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HTTP request to the cross-site search server 20. Then, 
the web server 27 of the cross-site search server 20 that 
received the HTTP request advances the process to S102. 

At S102, the web server 27 transmits the HTTP response 
5 that contains the screen data of the search item input screen 
in its body to the user terminal 10 that sent the request. 
The web browser 16 that received the screen data (HTML data) 
displays the search item input screen on the display 12. 
Fig. 8 is an example of the search item input screen. The 

10 search item input screen is divided into a first frame 41 
that includes a number of check boxes 411 corresponding 
to the respective information retrieval sites 30, a second 
frame 42 that includes an "ISBN/ISSN" column 421, and a 
third frame 43 that includes a "title" column 431, an 

15 "author" column 432, a "publisher" column 433, a "keyword" 
column 434 and a "search" button 435. 

Further, in the screen data for displaying the 
contents of the third frame 43, the item name of "TITLE" 
is set in NAME attribute of the <input> tag for displaying 

20 the "title" column 431, the item name of "auth" is set in 
NAME attribute of the <input> tag for displaying the 
"author" column 432, the item name of "pub" is set in NAME 
attribute of the <input> tag for displaying the "publisher" 
column 433, and the item name of "keyword" is set in NAME 

25 attribute of the <input> tag for displaying the "keyword" 
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column 434. These attributes are not shown in Fig. 8. 
Furthermore, the screen data is provided with <form> tags 
for transmitting the information inputted into the text 
boxes displayed on the screen by the respective <input> 
5 tags. The description to pass the argument generated by 
the <input> tag to the cross-site search server 20 by the 
POST method has been recorded in the ACTION attribute of 
the <form> tag. 

Therefore, when a user (an operator of the user 

10 terminal 10) operates the mouse to move the pointer over 
the "search" button 435 and left-cricks, or when the user 
operates arrow keys to move the cursor over the "search" 
button 435 and presses an enter key, the search condition 
and site information of the selected information retrieval 

15 site 30 are transmitted to the web server 2 7 of the cross-site 
search server 20 by the POST method. The search condition 
includes combinations of the item names of the respective 
columns 431 through 434 and the values input in the 
respective columns by the user (item name = value) . The 

20 information retrieval site 30 is selected based on the check 
marks input in the respective check boxes in the first frame 
41 and the information of the selected site is transmitted 
as the selected site information. 

On the other hand, the web server 27 advances the 

25 process from S102 to S103 after transmitting the screen 
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data of the search item input screen to the web browser 
16 of user terminal 10 at S102. At S103, the web server 
27 stands by until receiving an HTTP request from the web 
browser 16 of the user terminal 10. Then, the web server 
5 27 advances the process to S104, if it receives the search 
conditions and the selected site information as an argument 
with the HTTP request from the web browser 16. 

At S104, the web server 27 reads the cross-site search 
CGI program 28 indicated by the URL in the HTTP request 

10 to start a cross-site search process and passes over the 
search conditions and the selected site information to the 
cross-site search process. Hereinafter, a reference "28" 
is given to the cross-site search process. 

Next, the contents of the cross-site search process 

15 28 will be described with reference to Fig. 5. The 
cross-site search process 28 acquires the search conditions 
and the selected site information from the web server 27 
at the first step S201 in the flow chart shown in Fig. 5. 
Then, the cross-site search process 28 performs the 

20 following loop process (S202 through S205) with respect 
to one or more information retrieval sites 30 designated 
by the selected site information (that is, the information 
retrieval site(s) 30 whose corresponding check box 411 in 
the first frame 41 of the search item input screen of Fig. 

25 8 was marked with the check mark) . 
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At S202, the cross-site search process 28 specifies 
one information retrieval site 30 as a target of the process 
from the selected one or more information retrieval sites 
30. 

5 At S203, the cross-site search process 28 reads the 

script definition 25 corresponding to the target 
information retrieval site 30 from the HDD 23. 

At the next step S204, the cross-site search process 
28 executes the below-mentioned script definition analysis 
10 process for the read script definition 25 and advances to 
S205 after finishing the script definition analysis 
process . 

At S205, the cross-site search process 28 specifies 
the next information retrieval site 30 as a target for 
15 processing. 

The cross-site search process 28 executes the above 
process loop from S202 to S205 repeatedly for all of the 
selected information retrieval sites 30. 

Next, the script definition analysis process that 
20 is repeatedly executed at S204 in the loop process will 
be described with reference to Fig. 6 and Fig. 7. At S301, 
the cross-site search process 28 judges the presence or 
absence of AUTH=GETAUTHENT ( ) . When AUTH = GETAUTHENT ( ) 
does not exist in the script definition 25, the cross-site 
25 search process 28 advances to S302. 
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At S302, the cross-site search process 28 judges 
whether the target information retrieval site 30 requires 
authentication or not. If the target information 
retrieval site 30 requires authentication, the cross-site 
5 search process 28 judges that this information retrieval 
site 30 requires authentication and does not restrict the 
access number, the process 28 advances to S303. 

At S303, the cross-site search process 28 substitutes 
one set of the login ID and the password described in the 

10 script definition 25 into the variables ID and PASSWD, 
respectively, based on the premise that this information 
retrieval site 30 is assigned to the cross-site search 
server 20 (and to another computer) . Then, the process 
28 adds the argument information to the end of the parameter 

15 creation area 28b and advances to S316. The argument 
information consists of the attribute value (item name) 
of the NAME attribute used by this information retrieval 
site 30 and the information substituted into the variable 
ID or the variable PASSWD. 

20 On the other hand, if it is judged that the target 

information retrieval site 30 does not require 
authentication at S302, not executing a series of steps 
based on the function for the authentication, the 
cross-site search process 2 8 advances to S319. In addition, 

25 the functions equivalent to the steps of S302 and S303 are 
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not illustrated in an example of the script definition 25 
shown in Fig . 3 . 

Further, if it is judged that AUTH=GETAUTHENT ( ) 
exists in the script definition 25 at S301, the cross-site 
5 search process 28 judges that the target information 
retrieval site 30 requires authentication and restricts 
the access number. Then, the process 28 executes the steps 
from S304 to S311 according to the function GETAUTHENT ( ) . 

At S304, the cross-site search process 28 loads all 

10 pieces of authentication information and ID information 
from the authentication information table 26 that is 
indicated by the file name defined in the function 
GETAUTHENT ( ) into the variable area 28a. 

At the next step S305, the cross-site search process 

15 28 distinguishes whether all pieces of the authentication 
information hold the corresponding ID information or not. 
That is, the cross-site search process 28 checks whether 
process ID is recorded in the "ID information" of every 
record of the authentication information table 26 for this 

20 information retrieval site 30 or not. If at least one piece 
of authentication information does not hold the 
corresponding ID information, that is, if the "ID 
information" field, of at least one record of the 
authentication information table 26 for this information 

25 retrieval site 30 is blank, the cross-site search process 
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28 advances to S306. 

At S306, the cross-site search process 28 sets the 
process ID currently assigned to itself to one piece of 
the authentication information whose ID information has 
5 not set, stores this process ID into the "ID information" 
field of the record holding the authentication information 
in question in the authentication information table 26, 
and advances to S312. 

On the other hand, when all pieces of the authenticate 
10 information hold the corresponding ID information at S305, 
i.e., when there is no record having a blank "ID information" 
field in the authentication information table 26 for this 
information retrieval site 30, the cross-site search 
process 28 advances to S307. 
15 At S307, the cross-site search process 28 acquires 

the process ID of all other cross-site search processes 
28 under execution, and advances to S308. 

At S308, the cross-site search process 28 checks 
. whether every piece of the ID information read at S304 is 
20 coincident with any process ID acquired at S307 or not. 
When the every piece of the ID information read at S304 
is coincident with any process ID acquired at S307, the 
cross-site search process 28 advances to S309. 

At S309, the cross-site search process 28 
25 distinguishes whether the number of times of execution of 
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5307 and S308 reached a predetermined upper limit or not. 
If the number of times of execution has not reached the 
predetermined upper limit, the cross-site search process 
28 returns to S307. 

During execution of the process loop S307 through 
S309, when the number of times of execution of S307 and 

5308 reaches the above-mentioned predetermined upper limit , 
the cross-site search process 28 branches from S309 toS310. 

At S310, the cross-site search process 28 judges 
certification cannot be acquired from this information 
retrieval site 30 and executes error handling for canceling 
the information retrieval request from this information 
retrieval site 30 . Then, the process 28 finishes the script 
definition analysis process. 

On the other hand, during execution of the process 
loop S307 through S309, when the ID information that is 
not coincident with any process ID is found before the number 
of times of execution of S307 and S308 reaches the 
above-mentioned predetermined upper limit, the cross-site 
search process 28 branches from S308 to S311. 

At S311, the cross-site search process 28 sets the 
process ID currently assigned to itself as new ID 
information of the authentication information 
corresponding to the found ID information and overwrites 
the "ID information" field of the record including the 
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authentication information in question in the 
authentication information table 26 with this process ID. 
Then, the process 28 advances to S312. 

At S312, the cross-site search process 28 substitutes 
5 the authentication information into the variable AUTH and 
stores it in the variable area 28a. Then, the process 28 
advances to S313. 

At S313, the cross-site search process 28 reads login 
ID from the authentication information substituted into 
10 the variable AUTH, substitutes this login ID into the 
variable ID, and stores it in the variable area 28a. Then 
the process 28 advances to S314. 

At S314, the cross-site search process 28 reads a 
password from the authentication information substituted 
15 into the variable AUTH, substitutes this password into the 
variable PASSWD, and stores it in the variable area 28a. 
Then, the process 28 advances to S315. 

At S315, the cross-site search process 28 stores the 
argument information having the login ID (it will be 
20 "auth" = 10001 in the example used in the description of the 
script definition) and the argument information having the 
password (it will be xx password"=QWlER2 in the example used 
in the description of the script definition) into the 
parameter creation area 28b. 
25 At the next step S316, the cross-site search process 
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28 reads the argument information from the parameter 
creation area 28b, converts the information by connecting 
the items in the information by substitutes the 

converted information into the variable PRM and stores it 
5 in the parameter creation area 28b. 

At the next step S317, the cross-site search process 
28 substitutes the URL of the authentication server program 
34 described in the script definition 25 corresponding to 
the target information retrieval site 30. 

10 At the next step S318, the cross-site search process 

28 transmits the argument information as the authentication 
information with the HTTP request to the target information 
retrieval site 30 through the web server 27, and stands 
by until a predetermined HTTP response including a message 

15 of success in authentication is received from this 
information retrieval site 30. Receiving the HTTP 
response through the web server 27, the cross-site search 
process 28 advances to S319. 

At S319, the cross-site search process 28 converts 

20 the item names included in the search conditions received 
as arguments at S103 into the item names that are used in 
the target information retrieval site 30, and stores them 
into the parameter creation area 28b. 

At the next step S320, the cross-site search process 

25 28 converts the argument information in the parameter 
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creation area 28b by connecting the respective items by 
x> &", substitutes the converted information into the 
variable PRM, and stores it in the parameter creation area 
28b. 

5 At the next step S321, the cross-site search process 

2 8 substitutes the URL of the search CGI program 33 described 
in the script definition 25 corresponding to the target 
information retrieval site 30 into the variable CGI. 

At the next step S322, the cross-site search process 

10 28 transmits the argument information as the search 
conditions with the HTTP request to the target information 
retrieval site 30 through the web server 27, and stands 
by until a predetermined HTTP response including search 
results is received from this information retrieval site 

15 30. Receiving the HTTP response through the web server 
27 , the cross-site search process 28 finishes the script 
definition analysis process. 

The cross-site search process 28 repeatedly executes 
the above-described script definition analysis process for 

20 each of one or more selected information retrieval sites 
30 during the process loop S202 through S205 of Fig. 5 and 
acquires the search results from the respective information 
retrieval sites 30. Then, escaping from the process loop, 
the cross-site search process 28 generates the screen data 

25 for presenting the search results based on the acquired 



- 33 - 



search results at S206 and then passes the screen data to 
the web server 27 , thereby the cross-site search process 
28 is completed. 

Receiving the screen data, the web server 27 transmits 
5 an HTTP response including the screen data in its body to 
the web browser 16 of the user terminal 10 that has requested 
the information retrieval. Then the web server 27 returns 
the process to S101 and stands by until receiving the next 
HTTP request. In addition, the web browser 16 of the user 
10 terminal 10 that received the screen data displays the 
search result screen on the display 12 based on the screen 
data . 

<About operation> 

Since the above-described processes are executed in 

15 the cross-site search system of the embodiment, the 
cross-site search system operates as follows. 

When a user inputs a search condition once according 
to a predetermined form to select information retrieval 
sites 30 as destination sites, the cross-site search server 

20 20 requests information retrieval after a predetermined 
authentication procedure from the information retrieval 
sites 30 that require authentication as a condition to 
respond search results (S302: Yes, S303 through S322), or 
directly requests information retrieval without the 

25 authentication procedure from the information retrieval 
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sites 30 that does not require authentication (S302: No) . 

Further, for the information retrieval sites 30 that 
restrict the access number by assigning predetermined sets 
of authentication information to a source of an.inf ormat ion 
5 retrieval request, the cross-site search server 20 uses 
the authentication information table 26 to manage whether 
the cross-site search process 28 uses the authentication 
information assigned by the information retrieval sites 
30 or not. Then, the respective cross-site search 

10 processes 28 of the cross-site search server 20 find and 
use the authentication information not in active use (S305: 
No, S306) . When the all pieces of the authentication 
information are actually used, the process 28 waits for 
a predetermined period (S305: Yes, S307 through S30 9) . And 

15 if any one piece of the authentication information is 
released, the process 28 uses the released authentication 
information (S308: Yes, S311). 

As a result, since the respective cross-site search 
processes 28 repeatedly use the authentication information 

20 not in actual use, the cross-site search server 20 can 
acquires the search result from the information retrieval 
sites 30 even if the information retrieval sites restrict 
the access number. 

As described above, the present invention enables 

25 to acquire search results matching the same search 
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condition from all target information retrieval sites 
regardless of whether an information retrieval site 
reguires authentication or not. 



- 36 - 



